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In the Claims: 

Please amend claims 1, 23, 32, and 33 as follows: 
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1. (Currently Amended) A method comprising: 
receiving an original digital good; and 

randomly applying various forms of protection to a plurality of segments of 
the original digital good to produce a protected digital good, 

wherein at least two of the segments overlap one another , 

2. (Original) A method as recited in claim 1, wherein the randomly 
applying comprises pseudo randomly applying the various forms of protection 
according to pseudo random techniques. 

3. (Original) A method as recited in claim 1, wherein the applying 
comprises randomly selecting the forms of protection from a set of available forms 
of protection. 

4. (Original) A method as recited in claim 1, wherein the applying 
comprises applying the various forms of protection to randomly selected portions 
of the original digital good. 
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5* (Original) A method as recited in claim 1, wherein the various forms 
of protection are selected from a group of protection tools comprising code 
integrity verification, acyclic code integrity verification, cyclic code integrity 
verification, secret key scattering, obfuscated function execution, 
encryption/decryption, probabilistic checking, Boolean check obftiscation, in- 
lining, reseeding pseudo random number generators with time varying inputs, anti- 
disassembly methods, varying execution paths between runs, anti-debugging 
methods, and time/space separation between tamper detection and response. 

6. (Original) A method as recited in claim 1, wherein the applying 
comprises applying a form of protection in which a checksum can be computed on 
a set of bytes of the digital good without actually reading the bytes. 

7. (Original) A computer-readable medium comprising computer- 
readable instructions that, when executed by a processor, direct a computer system 
to perform the method as recited in claim L 

8. (Original) A method comprising: 
segmenting a digital good into a plurality of segments; 
selecting multiple segments from the plurality of segments; and 
transforming the selected segments according to different protection 

techniques to produce a protected digital good having a composite of variously 
protected segments. 
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9. (Original) A method as recited in claim 8, wherein at least two of the 
segments overlap one another. 

10. (Original) A method as recited in claim 8, wherein the selecting 
comprises randomly selecting the segments. 

11. (Original) A method as recited in claim 8, wherein the transforming 
comprises transforming the selected segments according to randomly chosen 
protection techniques. 

12. (Original) A method as recited in claim 8, wherein the transforming 
comprises: 

augmenting at least one segment using a certain protection technique; and 
inserting a checkpoint, which may be used to evaluate a validity of the 

augmented segment, within the protected digital good but outside of the 

augmented segment being evaluated. 

13. (Original) A method as recited in claim 8, Anther comprising 
receiving quantitative parameters indicative of how much the protected digital 
good should be altered. 

14. (Original) A method as recited in claim 13, wherein the 
transforming is performed to satisfy the quantitative parameters. 
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15. (Original) A method as recited in claim 8, wherein the protection 
techniques are selected from a group of protection tools comprising code integrity 
verification, acyclic code integrity verification, cyclic code integrity verification, 
secret key scattering, obfuscated fiinction execution, encryption/decryption, 
probabilistic checking, Boolean check obfiiscation, in-lining, reseeding pseudo 
random number generators with time vaiying inputs, anti-disassembly methods, 
varying execution paths between runs, anti-debugging methods, and time/space 
separation between tamper detection and response. 

16. (Original) A method as recited in claim 8, wherein the transforming 
comprises applying a protection technique in which a checksum can be computed 
on a set of bytes of the digital good without actually reading the bytes. 

17. (Original) A computer-readable medium comprising computer- 
readable instructions that, when executed by a processor, direct a computer system 
to perform the method as recited in claim 8* 

18* (Original) A method comprising: 

establishing parameters prescribing a desired quantity of protection to be 
applied to a software product; 

parsing the software product into code sections; 
selecting at least one code section; 

augmenting the selected code section to add protection qualities; and 
repeating the selecting and the augmenting for different code sections until 
the desired quantity of protection has been applied* 
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19. (Original) A method as recited in claim 18, wherein the establishing 
comprises enabling a user to enter the parameters. 

20. (Original) A method as recited in claim 18, wherein the augmenting 
comprises applying a protection technique selected from a group of protection 
techniques comprising code integrity verification, acyclic code integrity 
verification, cyclic code integrity verification, secret key scattering, obfuscated 
function execution, encryption/decryption, probabilistic checking, Boolean check 
obfiiscation, in-lining, reseeding pseudo random number generators with time 
varying inputs, anti-disassembly methods, varying execution paths between runs, 
anti-debugging methods, and time/space separation between tamper detection and 
response. 

21. (Original) A method as recited in claim 18, wherein the augmenting 
comprises applying a protection technique in which a checksum can be computed 
on a set of bytes of the digital good without actually reading the bytes. 

22. (Original) A computer-readable medium comprising computer- 
readable instructions that, when executed by a processor, direct a computer system 
to perform the method as recited in claim 18. 

23. (Currently Amended) A production system, comprising: 
a memory to store an original digital good; and 



Lee A hates, pllc 

RESP0M5B TO OFFICE ACTION DATED DECEMBER 25, JtttJ 



7 



ATTORNEY VQC<£T NO. MS1-515US 
Serial No. 00/^30,091 



PAGE 8(20 * RCVD AT 312312004 6:29:27 PM [Eastern Standard Time] ' SVR:USPT0-EFXRF-1J2 ' DNIS:8729306 * CS1D:3035390271 * DURATION (mm-ss):04-58 



AND HAYES -PLLC 3035390271 TO TTO 



MAR 23 2004 16=31 FR FEE AND HAYES -PLLC 3035390271 TO T703872930S P. 09/20 



12 
13 
14 
. 15 
16 
1? 
18 
19 
20 
21 
22 
23 
24 
25 



a production server equipped with a set of multiple protection tools that 
may be used to augment the original digital good for protection purposes, the 
production server being configured to parse the original digital good and apply 
protection tools selected from the set of protection tools to various portions 
selected portions of the original digital good in a random manner to produce a 
protected digital good having a composite of variously protected the protected 
selected portions. 

24. (Original) A production system as recited in claim 23, wherein the 
protection tools are selected from a group of protection tools comprising code 
integrity verification, acyclic code integrity verification, cyclic code integrity 
verification, secret key scattering, obfuscated function execution, 
encryption/decryption, probabilistic checking, Boolean check obfliscation, in- 
lining, reseeding pseudo random number generators with time varying inputs, anti- 
disassembly methods, varying execution paths between runs, anti-debugging 
methods, and time/space separation between tamper detection and response. 

25- (Original) A production system as recited in claim 23, wherein the 
production server applies a protection tool that enables a checksum to be 
computed on a set of bytes of the digital good without actually reading the bytes. 

26. (Original) A production system as recited in claim 23, wherein the 
production server has a pseudo random generator to introduce randomness into the 
application of the protection tools to various portions of the original digital good. 
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27. (Original) An obfuscation system, comprising: 

a parser to parse a digital good into a plurality of segments; 

a set of protection tools that may be applied to the segments of the digital 
good to augment the segments with protection qualities; 

a target segment selector to select at least one segment from the plurality of 
segments; and 

a tool selector to select at least one protection tool from the set of protection 
tools and apply the selected protection tool to the selected segment. 

28. (Original) An obfuscation system as recited in claim 27, wherein 
the protection tools are selected from a group of protection tools comprising code 
integrity verification, acyclic code integrity verification, cyclic code integrity 
verification, secret key scattering, obfuscated function execution, 
encryption/decryption, probabilistic checking, Boolean check obfuscation, in- 
lining, reseeding pseudo random number generators with time varying inputs, anti- 
disassembly methods, varying execution paths between runs, anti-debugging 
methods, and time/space separation between tamper detection and response. 

29. (Original) An obfuscation system as recited in claim 27, wherein 
the target segment selector comprises a pseudo random generator to enable 
random selection of the segment. 
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30. (Original) An obfiiscation system as recited in claim 27, wherein 
the tool selector comprises a pseudo random generator to enable random selection 
of the protection tool, 

31. (Original) An obfiiscation system as recited in claim 27, further 
comprising a quantitative unit to specify a quantity of protection qualities to be 
added to the digital good. 

32. (Currently Amended) A client-server system, comprising: 

a production server to randomly apply various forms of protection to 
selected portions of a digital good to produce a protected digital good; and 

a client to store and execute the protected digital good, the client being 
configured to evaluate the protected digital good to determine whether the 
protected digital good has been tampered with. 

33. (Currently Amended) One or more computer-readable media 
having computer-executable instructions that, when executed, direct a computing 
device to: 

parse a digital good into a plurality of segments; and 
apply multiple different protection tools to various segments a_selected 
portion of the segments in a random manner to produce a protected digital good 
having a composite of variously protected portions. 
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34. (Original) One or more computer-readable media as recited in claim 
33, further comprising computer-executable instructions to randomly select the 
protection tools from a set of available protection tools. 

35. (Original) One or more computer-readable media as recited in claim 
33, further comprising computer-executable instructions to apply the protection 
tools to randomly selected portions of the original digital good. 

36. (Original) One or more computer-readable media as recited in claim 
33, wherein the protection tools are selected from a group of protection tools 
comprising code integrity verification, acyclic code integrity verification, cyclic 
code integrity verification, secret key scattering, obfuscated function execution, 
encryption/decryption, probabilistic checking, Boolean check obfuscation, in- 
lining, reseeding pseudo random number generators with time varying inputs, anti- 
disassembly methods, varying execution paths between runs, anti-debugging 
methods, and time/space separation between tamper detection and response. 
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